CVE-2026-107225

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that...

EUVD-2026-94556

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that...

CVE-2026-107225 Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that...

CVE-2026-107225

The Excelize Go library (versions 2.8.0 to 2.11.0 ) is vulnerable to a denial-of-service condition due to improper input validation in the GetStyle function. The root cause is that the extraction predicates for fill, border, and font indices only check upper bounds, allowing negative values from ...

CVE-2026-107225 Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that...